Skip to content
OpenAdvisories

Product · gitify-app

gitify

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.1

    Gitify before 7.10.0 Login CSRF via Missing OAuth State Validation

    Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performGitHubWebOAuth() omits OAuth state validation. Attackers can get a gitify://oauth?code= link …